CVE-2020-26672

MEDIUM · CVSS 5.4 EPSS 0.72%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-10-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-26672

Severity

MEDIUM

CVSS

5.4

EPSS

0.72%

WordPress

Original NVD Description

Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database.